Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c2dd0ecd-7ba4-3500-aa8d-8893440d9d06.roa
File:                     c2dd0ecd-7ba4-3500-aa8d-8893440d9d06.roa (raw, json)
Hash identifier:          YGyKvjV1ze1trDbm25Qr+SVqjiQLxj2/CJU05LSFDD0=
Subject key identifier:   12:D9:4A:C3:0F:64:FA:62:40:E0:3D:F4:D5:58:64:D6:83:03:0E:D3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA79709EC7C857367FF8BEF80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c2dd0ecd-7ba4-3500-aa8d-8893440d9d06.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        192.154.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:09:ec:7c:85:73:67:ff:8b:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f9b238e1-881a-46a5-b731-29a339a00b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:d2:e4:b6:f7:cc:c3:73:70:6d:00:78:52:
                    e1:18:2a:f8:9f:54:27:0a:12:72:ed:a8:0c:0b:e7:
                    4f:ca:a6:af:5a:ab:6b:20:a9:e0:12:a4:68:dd:93:
                    5f:eb:93:37:82:4e:cd:70:ae:d9:d2:b7:ec:24:56:
                    67:80:de:06:59:8d:f5:f0:f5:c3:4b:f0:b4:13:6a:
                    91:77:2c:22:c9:87:5a:3e:3f:e7:0f:26:11:b1:67:
                    59:d4:ab:7b:08:72:af:2d:24:6f:74:cc:3f:70:cf:
                    03:65:eb:9a:66:70:3f:f1:5d:3c:49:d0:f8:d3:15:
                    12:8c:15:a9:b3:9f:93:f3:cf:32:fc:42:3a:c3:ec:
                    a2:41:51:c9:23:a4:9a:87:7a:7b:c5:68:d7:a1:f1:
                    72:3e:1f:c6:ea:d7:a0:30:94:f0:0c:b3:e6:52:09:
                    ec:e4:3b:9d:20:27:e4:fd:44:64:1c:93:4d:c2:b6:
                    1e:68:9d:39:5c:97:e2:73:46:86:5d:fe:0f:24:2c:
                    19:af:bc:33:9b:bf:50:4a:22:68:33:99:87:50:3b:
                    43:d9:7a:7d:00:19:12:93:03:c7:b8:3c:e8:4a:62:
                    92:26:2f:73:a5:1b:04:5e:6f:05:d1:33:7b:f1:ef:
                    51:e9:1b:5b:a7:df:c2:c4:38:a1:27:f9:95:6f:20:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:4A:C3:0F:64:FA:62:40:E0:3D:F4:D5:58:64:D6:83:03:0E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c2dd0ecd-7ba4-3500-aa8d-8893440d9d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ac:64:48:70:5b:66:ce:f9:20:e4:38:67:de:2d:d6:66:ee:
         d2:f5:ad:27:a1:c1:46:f2:9e:33:ea:3f:13:0f:c8:6e:5d:72:
         08:c8:f3:4e:66:d9:01:9b:82:c4:ba:4e:f0:1d:2e:8e:db:3c:
         30:61:9f:41:fb:b0:46:44:44:1d:35:00:10:00:51:9f:92:f2:
         fa:0e:62:4a:02:3a:b5:35:81:73:a4:38:5b:e7:40:81:b0:03:
         ca:63:c1:4c:a3:27:85:10:5f:3e:90:47:d3:df:86:b4:7d:97:
         b2:c9:ed:4c:19:b9:da:a7:7d:28:74:61:72:23:2a:a0:9a:76:
         6c:af:e8:04:6a:bf:0c:5a:af:1e:4d:76:75:0a:87:43:87:cf:
         c9:0d:6e:d2:fb:44:a4:59:8f:32:e2:b0:d8:7f:ac:ee:5c:a7:
         41:ae:a3:6c:f3:8a:87:fc:45:23:7c:b6:9e:1c:d1:15:f4:90:
         b9:a9:97:7f:aa:4f:5b:7b:7f:cd:6d:3e:fa:70:ea:8c:0b:99:
         4c:a1:d2:db:d0:94:fd:b2:24:8f:7f:cd:26:22:7a:a9:1f:c0:
         99:88:95:b3:7a:9d:7d:90:af:98:fd:f8:84:cb:8b:1f:e3:72:
         77:20:84:e0:cc:f0:36:38:95:16:3e:93:87:c4:df:c9:66:6e:
         36:3d:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:34 2026 by rpki-client